orders

List the company's orders

Cursor-paginated index of the authenticated company’s orders, resolved entirely from Elasticsearch — filtering, sorting and pagination all happen in the search index rather than in Postgres.

Two deliberate differences from GET /api/v202506/orders:

No stats block. The response meta carries pagination only. Aggregate figures (total and average CV, total and average amount, fulfilled count) come from GET /api/v202506/orders/stats, which is cached and built for them. Computing a whole-set aggregation on every page of a list endpoint is what made the v2025-06 index expensive.
No SQL fallback. If the search index cannot answer, this endpoint returns 503 rather than quietly running the slow query it exists to replace. Callers that need availability over index freshness should stay on v2025-06.

Cursors are Elasticsearch search_after tokens. They are opaque: echo meta.pagination.next_cursor back as page[cursor] to walk forward and prev_cursor to walk back. They are not interchangeable with the v2025-06 Rotulus cursors.

Visibility follows the authenticated credential, never a parameter: a company admin sees the company’s orders, and a rep sees only the orders they hold volume credit on plus their own purchases.

Unlike GET /api/v202506/orders, this surface does not accept customer JWTs — a customer token is rejected with 401. Customers read their own orders from GET /api/checkout/v2026-04/customers/me/orders.

GET

api

v202604

orders

List the company's orders

curl --request GET \
  --url https://api.fluid.app/api/v202604/orders \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.fluid.app/api/v202604/orders', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/v202604/orders",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/v202604/orders"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/v202604/orders")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "orders": [
    {
      "id": 123,
      "order_number": "<string>",
      "token": "<string>",
      "order_status": "<string>",
      "financial_status": "<string>",
      "fulfillment_status": "<string>",
      "status": "<string>",
      "sale_date": "2023-11-07T05:31:56Z",
      "created_at": "2023-11-07T05:31:56Z",
      "updated_at": "2023-11-07T05:31:56Z",
      "email": "<string>",
      "first_name": "<string>",
      "last_name": "<string>",
      "external_id": "<string>",
      "source": "<string>",
      "currency_code": "<string>",
      "currency_symbol": "<string>",
      "amount": "<string>",
      "amount_in_base": "<string>",
      "total_display_amount": "<string>",
      "total_cv": "<string>",
      "total_qv": "<string>",
      "items_count": 123,
      "quantity_count": 123,
      "customer": {
        "id": 123,
        "full_name": "<string>",
        "email": "<string>"
      },
      "first_item": {
        "title": "<string>",
        "image_url": "<string>"
      },
      "subscription": {
        "subscription_token": "<string>",
        "status": "<string>"
      }
    }
  ],
  "status": 123,
  "meta": {
    "request_id": "<string>",
    "timestamp": "2023-11-07T05:31:56Z",
    "pagination": {
      "cursor": "<string>",
      "limit": 123,
      "prev_cursor": "<string>",
      "next_cursor": "<string>",
      "total_count": 123
    }
  }
}

{
  "message": "Invalid credentials."
}

{
  "message": "Not authorized."
}

{
  "error": {
    "message": "<string>",
    "details": {}
  },
  "status": 123,
  "meta": {
    "request_id": "<string>",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "message": "<string>",
    "details": {}
  },
  "status": 123,
  "meta": {
    "request_id": "<string>",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization

string

header

required

Bearer token authentication. Accepts company tokens, partner tokens, public tokens, droplet installation tokens, and user_company tokens. The authenticated credential determines editor_type and editor_id on the resulting order-edit audit records — the payload never carries either field.

Query Parameters

string

Free-text search. Matches substrings, so a partial value finds the row — pasting 4821 finds order number F148217.

Searches, in one pass:

the order's order_number, email, first_name, last_name, phone and external_id
the buyer's full name and the owning member's full name and email
the order's numeric id, its number sequence, and the customer's legacy id

Every term must match, and all of them must match within a single one of those fields. Full names are indexed joined for exactly this reason, so jane smith finds an order whose first and last name columns hold one word each.

sort

enum<string>

Sort key. A leading - reverses the direction. Defaults to -sale_date (newest first by effective sale date, which is the order's sale_date falling back to created_at).

Available options:

sale_date,

-sale_date,

created_at,

-created_at,

id,

-id,

order_status,

-order_status,

status,

-status,

customer_name,

-customer_name,

customer,

-customer,

amount,

-amount

page[cursor]

string

Opaque search_after cursor from a previous response's meta.pagination.next_cursor or prev_cursor. Omit for the first page. A malformed cursor returns 422.

page[limit]

integer

Page size. Defaults to 25, capped at 100.

Required range: 1 <= x <= 100

filter[status]

enum<string>

Restrict to one order status. The sentinel all imposes no constraint and is equivalent to omitting the filter.

Available options:

all,

draft,

pending,

pending_review,

processing,

completed,

cancelled,

archived

filter[type]

enum<string>

Restrict to one order class.

Available options:

sample_order,

customer_order,

member_order,

enrollment_order,

autoship_order

filter[order_number]

string

Exact match on the human-facing order number.

filter[cart_source]

string

Restrict to orders whose originating cart carried this source value.

filter[customer_id]

integer

Restrict to one customer's orders, matched on either the owning member or a legacy customer id carried on order metadata.

filter[user_company_id]

integer

Restrict to orders a given rep holds volume credit on, addressed by legacy UserCompany id.

filter[subscription_id]

integer

Restrict to orders belonging to one subscription.

filter[country_isos]

string

Comma-separated ISO-2 or ISO-3 country codes; matches orders shipped to any of them.

filter[start_date]

string<date>

Inclusive lower bound on the effective sale date, as a calendar date resolved through filter[timezone].

filter[end_date]

string<date>

Inclusive upper bound on the effective sale date, as a calendar date resolved through filter[timezone].

filter[timezone]

string

IANA timezone used to resolve filter[start_date] and filter[end_date] to day boundaries, so a day means the caller's day. Defaults to UTC; Etc/Unknown is treated as absent. An unrecognised zone returns 422.

Response

A page of orders, newest first unless sort says otherwise.

A page of orders. meta carries pagination only — this surface publishes no stats block; see GET /api/v202506/orders/stats.

orders

object[]

required

The orders on this page, in the requested sort order.

Show child attributes

status

integer

required

HTTP status code, repeated in the body (200 on success).

meta

object

required

Response metadata — request correlation fields plus cursor pagination.

Show child attributes

List the company's orders

curl --request GET \
  --url https://api.fluid.app/api/v202604/orders \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.fluid.app/api/v202604/orders', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/v202604/orders",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/v202604/orders"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/v202604/orders")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "orders": [
    {
      "id": 123,
      "order_number": "<string>",
      "token": "<string>",
      "order_status": "<string>",
      "financial_status": "<string>",
      "fulfillment_status": "<string>",
      "status": "<string>",
      "sale_date": "2023-11-07T05:31:56Z",
      "created_at": "2023-11-07T05:31:56Z",
      "updated_at": "2023-11-07T05:31:56Z",
      "email": "<string>",
      "first_name": "<string>",
      "last_name": "<string>",
      "external_id": "<string>",
      "source": "<string>",
      "currency_code": "<string>",
      "currency_symbol": "<string>",
      "amount": "<string>",
      "amount_in_base": "<string>",
      "total_display_amount": "<string>",
      "total_cv": "<string>",
      "total_qv": "<string>",
      "items_count": 123,
      "quantity_count": 123,
      "customer": {
        "id": 123,
        "full_name": "<string>",
        "email": "<string>"
      },
      "first_item": {
        "title": "<string>",
        "image_url": "<string>"
      },
      "subscription": {
        "subscription_token": "<string>",
        "status": "<string>"
      }
    }
  ],
  "status": 123,
  "meta": {
    "request_id": "<string>",
    "timestamp": "2023-11-07T05:31:56Z",
    "pagination": {
      "cursor": "<string>",
      "limit": 123,
      "prev_cursor": "<string>",
      "next_cursor": "<string>",
      "total_count": 123
    }
  }
}

{
  "message": "Invalid credentials."
}

{
  "message": "Not authorized."
}

{
  "error": {
    "message": "<string>",
    "details": {}
  },
  "status": 123,
  "meta": {
    "request_id": "<string>",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "message": "<string>",
    "details": {}
  },
  "status": 123,
  "meta": {
    "request_id": "<string>",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Overview

Task guides

Endpoints

Auth endpoints

Checkout endpoints

Public SDK endpoints

Payment gateway endpoints

Cart payment endpoints

Commerce endpoints

Webhooks endpoints

Company admin endpoints (v0)

List the company's orders

Authorizations

Query Parameters

Response